Connections between Tusky and mod companion

[connyduck]

In which places should we add connections between the two apps? The direction Tusky -> companion should of course only be possible when the companion is installed and the user has moderation rights.

These come to my mind:

• when viewing an account in Tusky it should be easy to switch to the companion to access the moderation actions for that account
• maybe a way to share login tokens so users do not have to log into both apps? But we have to be super careful there to not create a security vulnerability when we do this.

[Briar503]

I was thinking something like an allow list for app ids and an oath style confirm. So,

1. companion app requests login credentials
2. Tusky checks to see if the app requesting is in an allow list
3. if in allow list tusky will display an activity with scope privileges and allow the user to authorize or reject
4. if authorized the token is returned to the requesting app

[connyduck]

In Android you can also do things like custom permissions that are granted to apps signed by the same certificate, this might help us implementing this usecase.